Pro US pressure increases for vulnerability disclosure programmes 8 Aug The FTC and DOJ push for a means for security researchers to report bugs, with the EU also moving closer
Pro Intel reports 32 separate lawsuits over Meltdown and Spectre 19 Feb Customers and shareholders have filed numerous suits claiming harm from what Intel has or hasn't done over vulnerabilities
Pro Microsoft’s free analytics service sniffs out Meltdown, Spectre patch status 16 Feb Windows Analytics can now scan enterprise PCs running Windows 10, Windows 8.1 and Windows 7 and report readiness to fend off attacks based on the...
Pro Leaked NSA exploits work on all Windows versions since 2000 6 Feb EternalSynergy, EternalRomance, and EternalChampion exploits reworked for vulnerable Windows versions
Pro Buggy open source components still dog dev teams 21 Apr The best code in the world can still pose a risk if it relies on vulnerable libraries and frameworks
Pro VMware patches critical VM escape flaws 30 Mar Four vulnerabilities were fixed in VMware ESXi, Workstation and Fusion
Pro Robots as bad as IoT devices for security vulnerabilities 2 Mar Researchers find basic security weaknesses in robot software components from several vendors
Pro Nearly half of all websites pose security risks 14 Dec A study of top one million domains finds 46% to have security problems
Pro Dell EMC patches critical flaws in VMAX enterprise storage systems 5 Oct Remote, unauthenticated attackers could exploit the vulnerabilities to fully compromise the systems
Pro Cisco patches serious flaws in router and conferencing server software 18 Jul Patches fix flaws in Cisco IOS, IOS XR, ASR 5000, WebEx Meetings Server, and Cisco Meeting Server
Pro Juniper patches high-risk flaws in Junos OS 15 Jul Attackers could exploit the flaws to gain admin access or cause denial-of-service conditions
Pro Symantec bugfest highlights the dangers of security software 6 Jul Security software has worse flaws than the average application
Life Flaws in Symantec products expose millions of computers to hacking 30 Jun High severity vulnerabilities in enterprise and consumer products could have allowed hackers to execute malicious code on computers with no user...
Pro Serious concerns over OEM PC update tools 1 Jun Researchers found remote code execution flaws in support tools from Acer, Asus, Lenovo, Dell, and HP
Pro Facebook bug hunter discovers backdoor left by other bug hunter 25 Apr Backdoor script stole Facebook employee credentials from a corporate server
Pro Researcher uses Regsvr32 function to bypass AppLocker 25 Apr Regsvr32 is whitelisted, seen as an essential system function
Pro Cisco fixes DoS flaws in wireless LAN controllers, other products 22 Apr One of the vulnerabilities is critical and the rest are rated as high severity
Subscribers 0
Fans 0
Followers 0
Followers